IPTABLES-RESTORE(8)            iptables 1.6.1            IPTABLES-RESTORE(8)

NAME         top

       iptables-restore — Restore IP Tables

       ip6tables-restore — Restore IPv6 Tables

SYNOPSIS         top

       iptables-restore [-chntvV] [-w secs] [-W usecs] [-M modprobe] [-T
       name] [file]

       ip6tables-restore [-chntvV] [-w secs] [-W usecs] [-M modprobe] [-T
       name] [file]

DESCRIPTION         top

       iptables-restore and ip6tables-restore are used to restore IP and
       IPv6 Tables from data specified on STDIN or in file. Use I/O
       redirection provided by your shell to read from a file or specify
       file as an argument.

       -c, --counters
              restore the values of all packet and byte counters

       -h, --help
              Print a short option summary.

       -n, --noflush
              don't flush the previous contents of the table. If not
              specified, both commands flush (delete) all previous contents
              of the respective table.

       -t, --test
              Only parse and construct the ruleset, but do not commit it.

       -v, --verbose
              Print additional debug info during ruleset processing.

       -V, --version
              Print the program version number.

       -w, --wait [seconds]
              Wait for the xtables lock.  To prevent multiple instances of
              the program from running concurrently, an attempt will be made
              to obtain an exclusive lock at launch.  By default, the
              program will exit if the lock cannot be obtained.  This option
              will make the program wait (indefinitely or for optional
              seconds) until the exclusive lock can be obtained.

       -W, --wait-interval microseconds
              Interval to wait per each iteration.  When running latency
              sensitive applications, waiting for the xtables lock for
              extended durations may not be acceptable. This option will
              make each iteration take the amount of time specified. The
              default interval is 1 second. This option only works with -w.

       -M, --modprobe modprobe_program
              Specify the path to the modprobe program. By default,
              iptables-restore will inspect /proc/sys/kernel/modprobe to
              determine the executable's path.

       -T, --table name
              Restore only the named table even if the input stream contains
              other ones.

BUGS         top

       None known as of iptables-1.2.1 release

AUTHORS         top

       Harald Welte <> wrote iptables-restore based on
       code from Rusty Russell.
       Andras Kis-Szabo <> contributed ip6tables-restore.

SEE ALSO         top

       iptables-save(8), iptables(8)

       The iptables-HOWTO, which details more iptables usage, the NAT-HOWTO,
       which details NAT, and the netfilter-hacking-HOWTO which details the

COLOPHON         top

       This page is part of the iptables (administer and maintain packet
       filter rules) project.  Information about the project can be found at
       ⟨⟩.  If you have a bug report for this man‐
       ual page, see ⟨⟩.  This page was
       obtained from the project's upstream Git repository
       ⟨⟩ on 2018-02-02.  (At that time, the
       date of the most recent commit that was found in the repository was
       2018-01-31.)  If you discover any rendering problems in this HTML
       version of the page, or you believe there is a better or more up-to-
       date source for the page, or you have corrections or improvements to
       the information in this COLOPHON (which is not part of the original
       manual page), send a mail to

iptables 1.6.1                                           IPTABLES-RESTORE(8)

Pages that refer to this page: iptables-xml(1)iptables(8)iptables-apply(8)iptables-save(8)